How can we help?¶

SoftwareSecurityLegalFoundationMembersTechnicalMarketing

Software¶

You have questions about purchasing ASF software or obtaining support for it.¶

All software produced by the Foundation is available for download, by anyone and for free, from our websites and mirrors. We do not sell it; we give it away. Neither do we provide formal or commercial support for any of our packages.

Also see theis it free and following sections in our license FAQ and ourApache software is free of cost page.

You have questions about ASF software and U.S. export control numbers (ECCNs).¶

Please consult ourdetailed information on the export control status ofThe Apache Software Foundation's products.

    If a vendor is choosing to distribute ASF software, it is their    responsibility to get whatever licenses or other blessings they need for    their application. Consult your own IP/export attorney    for further advice.

You have issues, bug reports, patches for a particular project.¶

Each Apache project uses an issue tracker dedicated to their project. Thebest way is to go to that project's webpage. If you still have troublefinding it, try finding the project atprojects.apache.org or by browsingissues.apache.org.

Legal¶

You have a question about Apache trademarks, or you want to know if a use of an Apache trademark is related to the ASF.¶

You may read ourformal Trademark Policy as an introduction. For any questions about the use of Apache marks, including logos and project or product names, or the Apache name or feather, contact theBrand Management Committee as well as to the relevantProject Management Committee.

You have questions about the Apache license.¶

If you have sent mail about a license issue or question, please review theonline license at the URL listed below.The gist of the license is that you may use, modify, and [re]distributethe Apache software as-is. As long as you do not change the software, youmay re-distribute it and call it "Apache." If you alter the software in anyway, other than tailoring the configuration files or making it compilableon your platform, you may only refer to it as being based upon Apache. Inall cases, altered or not, you must include attribution as described insection 3 of the license. If you have further questions, see ourlicenseFAQ. If that doesn't answer them, you may contact ourLegal Affairs Committee.

We address specific questions about trademarks of The Apache Software Foundation on theTrademark Policy page.

Security¶

How do I report a vulnerability?¶

Visithttps://apache.org/security/ to learn how to report a security vulnerability.

Foundation¶

Is the Apache Software Foundation (ASF) a Corporation?¶

Yes, the ASF is a membership-based corporation registered in Delaware,United States. It is a registered non-profit charity, and has received 501(c)(3) status from the U.S. Internal Revenue Service.However, even if something happens that changes that status, the ASF isstill a not-for-profit enterprise.

How does the ASF help its projects?¶

As a corporate entity, the Apache Software Foundation is able to be a partyto contracts, such as for technical services or guarantee-bonds forconferences. It can also accept donations on behalf of its projects,clarify any associated tax issues, and create additional self-fundedservices via community building activities, such as Apache-related T-shirtsand user conferences.

In addition, the Foundation provides a framework for limiting the legalexposure of individual volunteers while they work on behalf of one ofASF projects. In the past, these volunteers were personally vulnerableto lawsuits, whether legitimate or frivolous, which impaired manyactivities that might have significantly improved contributions to theprojects and benefited our users.

Why are PMC Chairs officers of the corporation?¶

As an officer of the corporation, PMC Chairs act on behalf of the corporation providing for their project the oversight that the ASF requires.Since the officer is acting on behalf of the corporation, there is no personal liability -- standard corporate assumption of liability occurs. If the officer were not acting in accordance with their stated role, then they would be personally liable.Since the ASF assumes liability, it responds on behalf of individual projects when there are complaints or even legal action.

Officers and members are further indemnified in accordance with our bylaws (meaning we also take care of their legal expenses if they are sued due to their role's actions). In essence, PMC chairs must be officers because the board can only delegate things to employees or officers. It is impossible to delegate authority to someone who has no authority.

What is the legal liability for committers, PMC members, ASF members, officers and directors?¶

The ASF provides protection from legal liability for Members, Officers, and Directors as noted in section 12.1 of the Bylaws. No legal liability is offered to committers, PMC members, and anyone else who contributes to the ASF and its projects.

Who owns the ASF code?¶

All software developed within the Foundation belongs to the ASF, and therefore the members. The members own the code and the direction of it and the Foundation. Committers work on their project's code; good committers become ASF members and thus share the ownership of the software and the Foundation's decision-making.

Members¶

How do I become a member of the ASF?¶

The Apache Software Foundation is a meritocracy, which means that, to become a member, you must first be actively contributing to one or more of the Foundation's collaborative projects. New candidates for membership are nominated by an existing member and then put to vote; a majority of the existing membership must approve a candidate in order for the candidate to be accepted.

Is it true that some companies are ASF Members?¶

No, the membership of the ASF is composed of individuals, not companies. This does not mean that individuals who work at a company cannot contribute to ASF, quite the contrary. We have a specific CLA to assure that individuals can clearly contribute to the ASF during "work time."

Technical¶

I believe my phone or laptop was hacked or adversely affected by the Apache Software Foundation. What do I do?¶

There are instances where bad actors use ASF software and/or the Apache license in their malicious code or misuse the Apache name for fraudulent purposes. The ASF does not create user apps or programs that comprise the many forms of malware. If you are experiencing issues with your mobile device, computer or website, we recommend you visit your mobile service provider, ISP, tech support provider, or web hosting provider. If you are otherwise threatened, please contact your local law enforcement authority for guidance.

For those seeking technical assistance with one of the ASF's hundreds of projects, we encourage you to visit theproject's site for information on mailing lists that may contain answers to your question or guidelines for known issues.

You unexpectedly see an Apache HTTP Server installation page when you visit a website.¶

If you have sent us mail because you saw a page saying 'It Worked!' (orsomething similar indicating that the Apache HTTP server has been installed) on your screenwhen you visit a web site, go back andREAD the page. It shouldexplain what is going on. The page is the equivalent of a demo or theReadMe file from a Windows application installation; it is intended for theperson who installed the software and is supposed to show that theinstallation completed successfully. The problem you are experiencinghas nothing to do with us, and we cannot help you. You need to contact theWebmaster for the site. If the site iswww.foo.com, for instance, trysending mail towebmaster@foo.com. If it'swww.toddsbeer.org, sendmail towebmaster@toddsbeer.org. And so on.

Some older versions of the 'It Worked!' page (supplied with older versions of the software)don't say that, or are mysterious or ambiguous. What theyshould say, and what the recentversions say, is something like this!

    It Worked! The Apache Web Server is installed on this Web Site!    ---    If you can see this page, then the people who own this    domain have just installed the Apache Web server software    successfully. They now have to add content to this directory    and replace this placeholder page, or else point the server    at their real content.    ---    If you are seeing this page instead of the site you expected,    please contact the administrator of the site involved. (Try    sending mail to <Webmaster@domain> Although this site is    running the Apache software it almost certainly has no other    connection to the Apache Group, so please do not send mail    about this site or its contents to the Apache authors. If you    do, your message will be ignored.

You see an Apache HTTP Server installation message on your own computer.¶

If you think that the Apache HTTP Server software has somehow been installed on your PC or laptop, don't worry: IT HASN'T. The page you are seeing is from a remote website that has installed our software and which you have visited.

Your security software reported an intrusion.¶

If you sent your message because your intrusion detection reported an attack on your system and you clicked on the name or IP address of the attacking system, please use the Whois (if it reported a name) or the ARIN (if it reported an address) databases to locate the actual owner of the system. These databases are the authoritative ones for the Internet.

You think ASF has stolen or hijacked one of your favorite websites.¶

If you think that ASF has somehow 'hijacked,' 'taken over,' or otherwise blocked access to a website, IT HASN'T. The people who actually run the website have installed or upgraded the Apache software which answers browser requests, and haven't completed the upgrade yet.

You're tracing spam.¶

If you have sent us mail because you think you have traced spam to a system that displays the 'It Worked!' page, or another page indicating that Apache is running on the system, the same advice applies: it is not our system; they are just using web software we develop and distribute for free. The web software has nothing to do with email or spam, it's just running on the same system. Apache has as much to do with email as Tetris does, and assuming we're responsible in any way for the spam is as reasonable as blaming Microsoft and Microsoft Excel because someone used Netscape to send you a nasty message. We are not and can not be responsible for their activity. Internet databases such as ARIN or Whois will help you find out who actually owns the systems, domains, and/or IP addresses involved.

Domain ownership lookup/IP address tracing¶

• How to: Look up the owner of a domain(such as foo.com):http://www.networksolutions.com/cgi-bin/whois/whois Whois database (tells you who owns a domain, such as foo.com).

• How to: Look up the owner of an IP address(such as 10.0.35.147):https://ws.arin.net/whois/. ARIN (Registered Internet Numbers) database (tells you who owns an IP address, such as 10.0.35.147, or which other database to query if the address is assigned outside the USA).

Marketing¶

Can I refer to an individual or organization as the "founder" or "creator" of an ASF project?¶

The ASF discourages this because it is detrimental to the long-term health of a project community to continually call attention to the individuals and/or organizations that originally created the project.

If it is necessary to highlight individuals and companies who founded a project that is now under the ASF’s stewardship, they may be referred to as "original creator of Apache Project Name" or "original developer of Apache Project Name."